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ABSTRACT 

Several  reliability  approximations  for  complex  coherent 
systems  with  highly  reliable  components  are  reviewed  and  the 
need  for  some  relatively  simple  approximations  which  would 
be  useful  in  a  preliminary  reliability  analysis  of  the  same 
type  of  system  is  presented.   Some  approximations  based  on 
minimal  paths,  minimal  cuts,  most  reliable  minimal  paths,  and 
least  reliable  minimal  cuts  are  investigated  in  terms  of 
simplicity  and  accuracy.   The  possible  applications  of  the 
approximations  are  illustrated  through  the  use  of  examples. 
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I.   INTRODUCTION 

During  the  past  two  decades,  the  world  has  experienced 
the  most  rapid  technological  advances  ever  known.   Coupled 
with  these  advances  have  been  the  formation  of  extremely 
complex  systems  and  the  development  of  highly  reliable  sys- 
tem components.   Computational  difficulties  in  determining 
system  reliability  (the  probability  that  a  system  will  work 
under  specified  conditions)  are  proportional  to  system 
complexity  and,  consequently,  have  grown  with  system  complex- 
ity.  In  fact,  the  computation  of  reasonably  accurate  approxi- 
mations or  bounds  to  system  reliability  has  almost  become  a 
formidable  problem  in  itself. 

There  exist  a  number  of  techniques  for  determining  upper 
and  lower  bounds  on  system  reliability.   However,  in  many 
cases  the  computation  of  these  bounds  is  nearly  as  difficult 
as  determining  the  true  system  reliability.   Relatively  simple 
approximations  to  system  reliability  with  order  of  magnitude 
accuracy  would  prove  invaluable  in  terms  of  time  and  computa- 
tional effort  saved  in  the  analysis  of  the  reliability  of  a 
complex  system. 

It  is  the  purpose  of  this  thesis  to  investigate  some  simple 
approximations  and  the  efficiency  of  these  simple  approxima- 
tions with  respect  to  established  bounds  and  approximations. 
Sections  II,  III,  and  IV  outline  various  notational  conven- 
tions and  definitions  used  in  later  sections.   Section  V 


outlines  some  of  the  existing  bounds  and  approximations  while 
Section  VI  contains  an  investigation  of  some  new  approxima- 
tions and  an  appraisal  of  their  accuracy. 


II.   COHERENT  SYSTEMS1 


In  general,  the  attention  of  this  thesis  will  be  focused 
on  systems  and  components  of  the  type  commonly  referred  to  as 
"Go/No  Go."   That  is,  at  a  particular  point  in  time  the  sys- 
tem and  its  components  are  required  to  perform  the  function 
for  which  they  were  designed  and,  at  that  time,  the  compo- 
nents and  system  function  properly  (Go)  or  fail  (No  Go) . 

It  is  possible  to  write  the  following  binary  performance 
indicator  for  the  system: 

1   if  the  system  functions  properly, 

<J>   - 

0   if  the  system  does  not  function  properly  (fails). 

The  performance  of  the  n  components  of  the  system  can  be  indi- 
cated by  the  vector  x  =  (x, ,  x„,...,x  )  where 

1   if  component  i  functions, 
x.   = 

0   if  component  i  fails. 

Assuming  that  the  system  performance  depends  deterministically 
on  component  performance,  it  is  possible  to  express  the  system 
performance  indicator  $    as  a  function  of  the  component  per- 
formance indicator  x.   The  function  4>  (x)  is  the  structure 
function  of  order  n. 


Portions  of  Sections  II,  III,  and  IV  have  been  para- 
phrased from  Esary  and  Proschan  (1962) ,  Mine  (1959) ,  and 
Moore  and  Shannon  (19  56) . 


Three  assumptions  are  made  regarding  system  and  component 
performance.   First,  it  is  reasonable  to  assume  that  if  all 
of  the  components  of  a  system  function  properly,  the  system 
will  function  properly.   Second,  it  is  also  reasonable  to 
assume  that  if  none  of  the  components  work,  the  system  will 
not  work.   Finally,  it  is  assumed  that  if  the  system  functions 
for  a  given  set  of  functioning  components,  the  system  will  not 
fail  if  the  set  of  functioning  components  is  enlarged.   These 
assumptions  can  be  expressed  in  the  following  manner: 

i)   <|>(1)   =   1   where  (I)   =   (1,1,. ..,1) 

ii)   <M0)   =   0   where  (0)   =   (0,0,  ...,0) 

iii)  <p{x)    >    <J>(y)  for  x>y  (i.e.  xi>yi,  i  =  l,2,...,n). 

A  system  whose  structure  function  $ (x)  has  the  above  proper- 
ties is  defined  to  be  a  coherent  system. 


III.   PATHS  AND  CUTS 

Each  specification  x  =  (x..  ,x-,  .  .  .  ,x  )  of  component  per- 
formances determines  a  partition  {A,B}  of  {l,2,...,n}  where 

A   =   {i|x.  =  1}   and   B   =   {i|x.  =  0}. 

If  $(x)  =  1,  A  is  called  a  path  of  the  system  and  if  <|>(x)  =  0, 
B  is  called  a  cut  of  the  system.   Occasionally,  x  is  called 
a  path  if  <j>(x)  =1  and  a  cut  if  <j>(x)  =0.   The  size  of  a  path 
or  cut  is  the  number  of  components  in  the  path  or  cut,  but 

reference  is  sometimes  made  to  the  size  of  x  given  by 

n 
s(x)   =    I      x 
i=l   1 

Because  of  possible  redundancy  at  the  component  and  sub- 
system level,  it  is  possible  that  not  all  of  the  components 
of  A  are,  in  fact,  required  to  perform  to  insure  that  the  sys- 
tem performs.   Similarly,  failure  of  all  of  the  components  of 
B  may  not  be  required  to  insure  that  the  system  fails.   For 
these  reasons,  a  path  A  is  defined  to  be  a  minimal  path  if  no 
proper  subset  of  A  is  also  a  minimal  path  and  a  cut  B  is  de- 
fined to  be  a  minimal  cut  if  no  proper  subset  of  B  is  also  a 
minimal  cut.   Since  the  number  of  components  in  a  system  is 
assumed  to  be  finite,  each  coherent  system  has  a  finite  number 

of  minimal  paths  A, ,A0,...,A   and  a  finite  number  of  minimal 
J.  2.  a 

cuts  B1,B2, . . . ,Bb. 

Consider  a  system  in  which  at  least  one  component  has 
failed  in  each  of  the  minimal  paths  with  the  exception  of 


minimal  path  A.  which  has  had  no  component  failures.   Then, 
all  of  the  components  in  A.  must  function  if  the  system  is  to 
function  and  the  components  of  A.  can  be  envisioned  as  being 
arranged  in  a  logical  series  manner.   Consider  also  a  system 
in  which  at  least  one  component  is  working  in  each  of  the 
minimal  cuts  with  the  exception  of  minimal  cut  B,  .   Then,  the 
system  will  fail  if  and  only  if  every  component  in  B,  fails 
and,  for  this  reason,  the  components  of  B,  can  be  envisioned 
as  being  arranged  in  a  logical  parallel  manner.   As  a  result, 
structure  functions  for  each  minimal  path  A.  and  each  minimal 
cut  B   can  be  written  as 

(III-D  ouCx)   =   ^A   x±  ,  j  =  1,2,. ..,a  , 

and 

(III-2)  3k(x)   =   1  -  ±^B  (1  -  xi)  ,  k  =  1,2,. ..,b 

These  structure  functions  are  also  binary  performance  indi- 
cators since 

1   if  all  the  components  of  A.  function, 
a  (x)   =  J 

•*  0   otherwise, 


and, 


!k(x) 


0  if  all  the  components  of  B   fail 

1  otherwise. 


Birnbaum,  Esary,  and  Saunders  (1961)  have  shown  that  it  is 
possible  to  represent  the  system  structure  function 
as  a  logical  parallel  arrangement  of  all  minimal  path  struc- 
ture functions  or  as  a  logical  series  arrangement  of  all  mini- 
mal cut  structure  functions.   These  minimal  path  and  mininal 

cut  representations  are 
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(III-3) 

and 


(X)        =       1    -       7T     [1    -    a.  (x)] 
j=l  3 


(III-4) 

respective ly . 


(x)       =        it    g    (x) 
k=l   k 
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IV.   RELIABILITY 

Let  the  binary  random  variable 

1   if  component  i  functions, 
X.   = 

0  if  component  i  fails. 

The  reliability  of  the  ith  component  is  then 
p.   =   Pr (X.  =  1)  =  E(X. ) . 

Let  the  binary  variable 

1  if  the  system  functions, 
<J>(X)   = 

0   if  the  system  fails. 

The  reliability  of  the  system  is  then  given  by 

h   =   Pr[<j>(X)  =  1]  =  E[<j>(X)]. 

If  the  components  perform  independently,  the  distribution  of 

X  =  (X,,X2,...,X  )  is  determined  by  p  =  (p  ,p  , ...,p  )  and 

h  =  h(p)  is  called  the  reliability  function  of  the  system. 

If  p.  =  p,  i  =  l,2,...,n  ,  the  reliability  function  is  written 

as  h (p) . 
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V.   EXISTING  BOUNDS  AND  APPROXIMATIONS 

With  the  growth  in  size  and  complexity  of  systems,  it 
has  become  increasingly  difficult  to  compute  the  actual  reli- 
ability of  a  system.   Consequently,  a  number  of  bounds  and 
approximations  to  the  exact  system  reliability  have  been 
developed.   Although  bounds  and  approximations  do  not  provide 
the  true  reliability  of  a  system,  the  error  introduced  is 
more  than  justified  in  terms  of  computational  time  and  effort 
saved. 

Birnbaum,  Esary,  and  Saunders  (1961)  have  derived  bounds 
on  system  reliability  based  on  the  length  and  width  of  a  sys- 
tem.  The  length,  I,    of  the  system  is  the  minimum  number  of 
components  whose  functioning  implies  the  system  functions. 
The  width,  w,  of  the  system  is  the  minimum  number  of  compo- 
nents  whose  failure  implies  the  system  fails.   Letting 

D.  =  Number  of  paths  of  c})(x)  such  that  s  (x)  =  j, 

D*  =  Number  of  cuts  of  $ (x)  such  that  s(x)  =  j, 

and  assuming  a  coherent  system  of  order  n  with  identical  com- 
ponent reliabilities,  the  authors  have  shown  that 
n  .  n-w 


(V-l)     I    D.p1(l  -  p)n_1  =  h(p)  =1-1    Di*p1(l  -  p) 
i=l   1  i=0  1 


n-i 


Taking  the  first  term  only  of  the  left  hand  side  and  the  last 
term  only  of  the  right  hand  side  results  in  the  following 
inequality : 
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(V-2)  DjtP*U    "   P)11"^'    <h(p)     <    1    -   D*_wIn' 


Using 


D.    >    ——  D-,    i   =   I,    £+l,...,n    , 
1  ,n>       x, 

KV 

and 

<i> 

Di    i  TH7Dn-w    '    l   =   O'1 "-" 

in    (V-l)    the    upper    and    lower   bounds    on    system   reliability   are 

D*         n-w 
CV-3)  1    -      -S2£     l^    (5)p1(l   -   P) 

and 


(    )       i=0 
w 


(V-4)  A     I    ("Ip^l   -  p)""1 

respectively. 

Esary  and  Proschan  (196  3)  have  derived  bounds  on  system 
reliability  using  the  minimal  path  and  minimal  cut  representa- 
tions of  the  system  structure.   In  both  the  minimal  path  repre- 
sentation, (III-3) ,  and  the  minimal  cut  representation,  (III-4) 
the  same  component  may  appear  in  more  than  one  minimal  path  or 
minimal  cut  and  it  is  necessary  to  imagine  that  all  replica- 
tions of  the  same  component  fail  simultaneously.   If,  instead, 
each  replica  of  the  same  component  in  the  minimal  path  repre- 
sentation is  replaced  with  an  independent  version  of  the  same 
reliability,  the  expectation  of  (III-3)  provides  an  upper 
bound  to  system  reliability.   Using  a  similar  procedure  on 
(III-4)  results  in  a  lower  bound  to  system  reliability. 
Esary  and  Proschan  have  shown  that,  for  a  given  p,  the  upper 
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bound,    called   the   minimal   path   upper   bound,    is 

<V-5>  !    "     .V1    "    ^A.Pi} 

and  that  the  lower  bound,  called  the  minimal  cut  lower  bound, 

is 

b 

(V-6)  IT   [1  -   TT    (1  -  p.)  ]  % 

k=l      ieBk 

Messinger  and  Shooman  (196  7)  derived  bounds  to  system 
reliability  in  terms  of  minimal  tie  sets  and  minimal  cut  sets. 
(Minimal  tie  sets  and  minimal  cut  sets  are  synonomous  with  the 
minimal  paths  and  minimal  cuts  previously  discussed.)   Using 
the  inclusion-exclusion  method  to  write  the  probability  state- 
ment for  the  union  of  several  events,  they  have  shown  that  the 
reliability  of  a  system  can  be  expressed,  in  terms  of  minimal 
cut  sets,  as 

m  m 


(V-7)   R  =  1  -  I    Pr(C.)  +    I         Pr(C.C.) 
i=l  i,i=l      1  3 


y 

i<j 

m 

I  Pr(C.C  C  )  ...  (-l)mPr(C  C?...C  ) 

i,j,k=l      1  :  K  l   z  m 

i<j<k 

where  m  represents  the  number  of  minimal  cut  sets  of  the  sys- 
tem, Pr(C.)  denotes  the  probability  that  all  the  components 
in  minimal  cut  set  i  fail,  Pr(C.C.)  denotes  the  pairwise 
joint  probability  that  all  the  components  in  minimal  cut  sets 
i  and  j  fail,  and  so  on.   A  lower  bound  to  system  reliability 
is  given  by 

m 

(V-8)  R     =   1  -  I    Pr(C. ) 

LB  i=1     i 
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and   an   upper   bound  by 

m  m 

(V-9)  R  =      1    -      I    Pr(C. )    +         I      Pr(C.C.) 

utJ  i=l  1  i,j=l  D 

i<j 

Both  (V-8)  and  (V-9)  are  accurate  approximations  for  systems 
composed  of  highly  reliable  components. 

It  was  noted  by  the  authors  that  (V-8)  and  (V-9)  are  true 
in  general  and  therefore  can  be  applied  to  a  system  with 
dependent  component  failures.   They  have  shown  that  by  adding 
successive  terms  to  (V-8)  in  the  manner  of  (V-7) ,  successive 
upper  and  lower  bounds  to  system  reliability  can  be  computed. 
However,  each  successive  upper  bound  is  not  necessarily  an 
improvement  over  the  previous  upper  bound  and  the  same  is  true 
of  the  successive  lower  bounds. 

Messinger  and  Shooman  also  presented  an  approximation 
called  the  Shannon  approximation  which  is  applicable  to  sys- 
tems with  highly  reliable  components.   Let  h.  equal  the  number 

of  components  in  cut  set  i  and  let  h  =  min  {h. }.   The  Shannon 

i 
approximation  is  then 

(v-10>  RSM  =   1  -  1    h  pr(5i» 

1 >h . =h 

If  all  components  are  independent  and  identical  in  reliability 
(p.  =  p  ,  i  =  l,2,...,n)  and  if  each  cut  set  contains  exactly 
h  components ,  then 

RSAH   =   L  "  mU  "  P)h 
Additional  inequalities  for  reliability  functions  have 
been  derived  by  Birnbaum  and  Esary  (1965) . 
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For  highly  complex  systems  the  bounds  and  approximations 
discussed  provide  a  means  for  evaluating  the  reliability  of 
systems  having  reliability  functions  which  are  difficult  to 
evaluate  exactly.   However,  the  computational  effort  required 
to  determine  the  bounds  or  approximations  may  be  excessive. 
In  fact,  it  may  not  be  possible  to  readily  identify  all  of 
the  minimal  paths  and  minimal  cuts  of  a  complex  system. 
Should  this  be  the  case,  it  would  certainly  be  desirable  to 
be  able  to  make  predictions  about  the  true  reliability  of  the 
system  based  on  available  minimal  path  and  minimal  cut  informa- 
tion.  Furthermore,  the  need  for  a  relatively  simple  and 
reasonably  accurate  approximation  to  system  reliability  often 
exists  in  the  preliminary  analysis  of  system  reliability  or 
because  of  time  constraints. 

Esary,  Marshall,  and  Proschan  (1969)  have  suggested  a 
method  for  approximating  the  reliability  of  a  system  composed 
of  unreliable  components  with  the  reliability  of  the  most 
reliable  minimal  paths  of  the  system.   System  duality2  suggests 
the  possibility  of  approximating  the  reliability  of  a  complex 
system  composed  of  highly  reliable  components  in  terms  of  the 
least  reliable  minimal  cuts  of  the  system.   This  possibility 
is  investigated  in  the  following  section  by  first  analyzing 
the  properties  of  minimal  path  and  minimal  cut  approximations, 
extending  the  analysis  to  approximations  based  on  the  least 


2 

See  Birnbaum,  Esary,  and  Saunders  (1961)  for  a  discussion 

of  duality. 
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reliable  minimal  cuts  and  most  reliable  minimal  paths,  and 
then  analyzing  the  form  of  the  approximating  functions  with 
respect  to  the  system  reliability  functions. 


]8 


VI.   SOME  SIMPLE  APPROXIMATIONS 


A.  MINIMAL  PATH  AND  MINIMAL  CUT  APPROXIMATIONS 
Recall  that  for  each  minimal  path  A.  there  exists  a 

structure  function  a  .  (x)  =  .     x.  and  for  each  minimal  cut 

3  1£A.    i 

B.  there  exists  a  structure  function  3,  (x)  =  1  -  .  D   (1  -  x. ) , 
K  K  lets,         r 

Clearly,  these  minimal  path  and  minimal  cut  structure  func- 
tions are  coherent.   The  reliability  function  for  each  mini- 
mal path  is  given  by 

(VI-1)       h*(p)   =   E[a.(X)]   =   JA   p. 

and  the  reliability  function  for  each  minimal  cut  is 
(VI -2)        h£(p)   =   E[6k(X)]   =   1  -  .^  (1  -  p.). 

Thus,  for  a  given  p  =  (p,,p„,...,p  )  the  reliability  of  each 

minimal  path,  h.  ,  j  =  1,2,..., a  ,  and  the  reliability  of 
each  minimal  cut,  h,  ,  k  =  1,2,. ..,b  ,  can  be  computed. 

If  it  is  not  possible  to  identify  all  of  the  minimal  paths 
and  minimal  cuts  of  a  complex  coherent  structure,  it  would 
certainly  be  desirable  to  use  as  much  of  the  available  infor- 
mation as  possible  in  approximating  system  reliability.   Since 
the  system  structure  can  be  represented  by  the  parallel  ar- 
rangement of  all  minimal  paths  or  the  series  arrangement  of 
all  minimal  cuts,  it  is  possible  that  the  system  reliability 
can  be  approximated  by  the  reliability  of  the  parallel 
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arrangement  of  those  minimal  paths  which  can  be  identified  or 

by  the  series  arrangement  of  those  minimal  cuts  which  can  be 

identified. 

Let  {A, ,A _,..., A  }  be  the  set  of  all  minimal  paths  of  a 
x   z      a 

coherent  system.   If  PC{A, , A„ , . . .A  }  represents  the  set  of 

—   J.   z      a 

minimal  paths  which  can  be  identified,  then  the  structure 
function  of  the  parallel  arrangement  of  the  identified  mini- 
mal paths  is 

(VI-3)       <j>P(x)   =   1  -  J[l  -  aj(x)] 

where  J  =  {j[A.£p}.   It  is  also  possible  to  write  the  struc- 
ture function  of  the  series  arrangement  of  the  identified 
minimal  cuts  as 

(VI-4)  <J,C(x)   =   kM^ 

where  K  =  {k|B  eC}  and  CC{B  , B  ,  .  .  .  ,B  }  is  the  set  of  iden- 
tified minimal  cuts.   For  a  given  p,  the  reliability  of  the 
parallel  arrangement  of  identified  minimal  paths  can  be  com- 
puted using 

(VI-5)  hP(p)   =   E[<f)P(X)|p] 

and  the  reliability  of  the  series  arrangement  of  identified 
minimal  cuts  can  be  computed  using 

(VI-6)  hC(p)   =   E[<j)C(X)  [p]. 


Proposition  1 


P* 


If  pCp*C{A, ,A„, . . . ,A  }  ,    then  hr  <   hr   <  h,  and  if 
J.   z       a  — 

CCC*C{BirB2, . . . ,Bb)  ,  then  hC  >   hC*  >   h  . 
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Proof 

The  minimal  path  representation  of  the  system  structure 

a 
function  is  <j>(x)  =  1  -   tt  [1  -  a  •  (x)  ]  .   If  PCP*6{A  ,  A  ,  . .  .  , 

j=l  J  L      * 

then    1    -   !L[1    -    a.(x)]    <   1   -   *    [1    -    a    (x)  ]    <    <J>(x)    where 


J   =    { j  |  A.  eP}    and   J*   =    {j|A.£p*}     .      Taking  expectations, 

E{1    -    JU    ~    a-U)]}    <   E{1    -    J^[l    -    cx.(X)]}    <    E[^(X)]r    i.e. 

_    p     p* 
for  a  given  p,  h   <  h    <  h.   The  minimal  cut  representation 

b 
of  the  system  structure  function  is  ^    Q,   (x) .   If 

k=l  K 

CCC*C(B1/B2f  ..  .,Bb>  ,  then   ^3k(x)  >J[*8k(x)  -  ^^  where 
K  =  {k|B  ec>  and  K*  =  {kJB.eC*}  •   Taking  expectations, 

E[£Sk(X)]  >  E[^3k(X)]  >  E[<J>(X)]  ,  i.e.  for  a  given  p  , 

r      C* 
hL>h   ^.  h. 

Note  that  if  the  set  P  consists  of  a  single  identified 
minimal  path  and  if  the  set  C  consists  of  a  single  identified 
minimal  cut,  upper  and  lower  bounds  on  system  reliability  are 
easily  established  by  computing  the  reliabilities  of  the  mini- 
mal path  and  minimal  cut  using  (VI-1)  and  (VI-2)  respectively. 
If  either  P  or  C  is  the  entire  set  of  minimal  paths  or  mini- 
mal cuts,  the  exact  reliability  of  the  system  can  be  computed 
using  (VI-5)  or  (VI-6)  as  appropriate. 

In  general,  Proposition  1  states  that  the  conservative 
estimate  of  system  reliability  using  minimal  paths  will  not 
be  decreased  and  the  optimistic  estimate  of  system  reliability 
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will  not  be  increased  as  additional  minimal  paths  or  cuts  are 
included  in  the  approximations.   In  fact,  it  can  be  shown  that 
if  0<p.<l,  i  =  1,2, ...,n  ,  all  of  the  inequalities  of  Proposi- 
tion 1  are  strict  and  an  improvement  in  estimates  is  guaran- 
teed as  additional  minimal  paths  or  minimal  cuts  are  included 
in  the  approximations. 

The  following  example  illustrates  the  applicability  of 
Proposition  1. 
Example  1:   Communications  System 

The  system  under  consideration  is  an  operating  tropospheric- 
scatter  radio  communications  system.   The  reliability  block 
diagram  and  component  descriptions  of  the  receive  portion  of 
the  system  are  shown  below. 


. 3  5  1 
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For  the  purposes  of  this  example,  it  is  sufficient  to  consider 
the  input  and  output  of  the  system  as  a  single  voice  circuit. 
Because  of  extreme  redundancy,  the  reliability  of  components 
nine  and  ten  is  nearly  unity  and  these  components  are  removed 
from  the  system  for  this  example.   Realistically,  each  of  the 
components  is  highly  reliable  and  it  is  assumed  that 
p.  =  p,  i  =  1,2,. ..,8  .   Under  this  assumption,  the  reliability 
function  for  the  mosified  system  is 

h(p)  =  2p2  +  2p3  -  3p4  -  2p5  +  p6  +•  2p7  -  p8  . 

The  minimal  paths  are  A,  =  {1,6}  ,  A  =  {2,7}  ,  A3  =  {1,3,5} 
and  A.  =  {2,4,8}  .   The  minimal  cuts  are  B   =  {1,2}  , 
B2  =  {1,4,7}  ,  B3  =  {1,7,8}  ,  B4  =  {2,3,6}  ,  B5  =  {2,5,6}  , 
B6  =  {3,4,6,7}  ,  B?  =  {3,6,7,8}  ,  BQ    =  {4,5,6,7}  ,  and 
Bq=  {5,6,7,8}  .   Figures  1  and  2  illustrate  the  improvement  in 
conservative  and  optimistic  estimates  of  system  reliability  as 
additional  minimal  paths  and  minimal  cuts  are  included  in  the 
approximation.   When  investigating  the  reliability  of  a  sym- 
metric system  (such  as  the  communications  system  of  this  ex- 
ample) in  terms  of  minimal  cuts,  certain  engineering 
considerations  should  also  be  included  in  the  reliability  anal- 
ysis.  Note  that  minimal  cuts  B?  and  B,  are  symmetric  in  that 
they  are  identical  in  size  and  with  respect  to  component  types. 
Similarly,  minimal  cuts  B-,  and  B5  are  symmetric  and  minimal  cuts 
B_  and  BR  are  symmetric.   Then,  any  approximation  to  system 
reliability  should  include  at  least  those  minimal  cuts  which 
are  symmetric  with  one  another.   For  example,  if  minimal  cut 
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B2  is  used  in  an  approximation,  minimal  cut  B.  should  also 
be  used  in  that  approximation;  if  minimal  cuts  B  ,  B_,  and 
B.  are  used  in  an  approximation,  minimal  cut  B   should  also 

be  used  in  that  approximation. 

C 
It  is  interesting  to  note  that  if  h   is  used  as  an  opti- 
mistic estimate  of  system  reliability  for  a  given  p,  it  is 

C  C 

possible  to  compute  a  lower  bound,  denoted  h::  ,  for  h   . 

The  method  used  to  compute  the  lower  bound  is  the  method  used 
by  Esary  and  Proschan  to  compute  the  minimal  cut  lower  bound 
for  system  reliability.   That  is,  if  any  components  are  com- 
mon to  two  or  more  of  the  minimal  cuts  used  in  the  approxima- 
te _ 
tion,  h  (p) ,  these  common  components  are  replaced  with 

independent  versions  of  identical  reliability.   The  lower 
bound  is  then  computed  using 

(VI-7)        hj  =  111-    .^(1  -p.)] 


whe 


re  K  =  {k|B  eC}.   Since  it  is  not  necessary  to  expand  the 

c  —  c        c 

structure  function  $  (x)  in  computing  h^    ,  h^  is  much  easier 

C  P  . 

to  compute  than  h   .   If  h   is  used  as  a  conservative  estimate 

of  system  reliability,  it  is  similarly  possible  to  compute  an 

upper  bound,  denoted  h'  ,  to  hr  .   The  upper  bound  is  given  by 

CVI-8)      hlp    =    1  -  5   (1  -  ±i^   p.) 

p 
where  J  =  {j|A.eP}.   The  computational  effort  required  for  hj 

p 
is  also  less  than  that  required  for  h 


If  P  is  the  set  of  all  minimal  paths  of  the  system,  the 
upper  bound,  h!.  ,  is  the  minimal  path  upper  bound  for  systei 
reliability.   If  C  is  the  set  of  all  minimal  cuts  of  the 
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r 

system,  the  lower  bound,  h   ,  is  the  minimal  cut  lower  bound 

for  system  reliability. 

C 
Since  h   is  an  optimistic  estimate  of  system  reliability 

C  C  C 

and  h-j.  is  a  lower  bound  to  h   ,  it  is  possible  that  hi!  might 

p 
be  useful  as  an  estimate  of  system  reliability.   Since  h   is 

P 
a  conservative  estimate  of  system  reliability  and  h   is  an 

P  P 

upper  bound  to  h   ,  it  is  also  possible  that  h   could  be  used 

as  an  estimate  of  system  reliability. 

This  technique  of  approximating  system  reliability  by 

assuming  the  independence  of  minimal  paths  and  the  independence 

of  minimal  cuts  was  applied  to  the  system  described  in  Ex- 

P  C 

ample    1.      Estimates,    h      and   h      ,    to   system   reliability  were 

computed  for  several  subsets  of  the  set  of  all  minimal  paths 

and  for  several  subsets  of  the  set  of  all  minimal  cuts.   For 

all  subsets  P  and  C  considered  and  for  p>0.90,  the  estimates 

C  P 

hj   were  accurate  to  within  +  0.005  while  the  estimates  h  were 

accurate  to  within  +  0.025.   The  results  for  ?**   =    {A^A^A^ 

and  ?***   =    {A,  ,A  ,A-.,A.}  are  shown  in  Figure  3  while  the 

results  for  C  =  {B  ,B  }  ,  C**  =  {B^B  ,  .  .  .  ,B  }  ,  and 

p*** 
C***  =  {B,,B2,  .  .  .  fBg}  are  shown  in  Figure  4.   Note  that  h^p) 

is  the  minimal  path  upper  bound  for  system  reliability  and  that 
h_(p)  is  the  minimal  cut  lower  bound  for  system  reliability. 
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These  simple  approximations  might  prove  useful  in  the 
preliminary  analysis  of  the  system  reliability.   It  should  be 

pointed  out,  however,  that  it  is  impossible  to  establish  a 

C  P 

general  ordering  of  the  magnitudes  of  h   ,  h  ,  and  h   and  that 

the  accuracy  of  the  estimates  is  sensitive  to  the  size  of  the 
subsets  P  and  C  (unlike  the  results  of  Proposition  1,  the 
inclusion  of  additional  minimal  paths  or  minimal  cuts  in  com- 
puting the  estimates  does  not  guarantee  an  improvement  in 
accuracy) . 


B.   MOST  RELIABLE  MINIMAL  PATH  AND  LEAST  RELIABLE  MINIMAL 
CUT  APPROXIMATIONS 

Assume,  for  the  moment,  that  it  is  possible  to  identify 

all  of  the  minimal  cuts  and  minimal  paths  of  a  system.   For  a 

given  p,  it  is  possible  to  order  the  minimal  path  reliabilities 

such  that 

LA       min  •,  A    .    ,  ~ 

h(1)   =    .   hj  ,  j    =  1,2,. .. ,a  , 

htj)  -  htj  +  D  '  j  =  L'2 a_1  ' 

LA       max  ,  A        ,  » 

h(a)   =    j   hj  '  D  =  lr2,...,a  , 

and  to  order  the  minimal  cut  reliabilities  such  that 

,  B        min  ,  B    ,     ,  „      , 
h(l)   =    k   hk  '  k  =  1'2 b  ' 

R  R 

h(k)   -  h(k+l)  ,  k  =  l,2,...,b-l  , 

h(b)   =    k   hk  '  k  "  l'2,...fb  . 

Define  a  Most  Likely  Minimal  Path  (MLMP)  as  a  minimal  path  A 
p 

A     A 
such  that  h   =  h,  ,  and  define  a  Most  Vulnerable  Minimal  Cut 
p     (a)  

(MVMC)  as  a  minimal  cut  B   such  that  h3  =  h3  x  .   The  MLMP  and 

c  c     (1) 
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MVMC  may  not  be  unique.   Therefore,  let  r  denote  the  multi- 
plicity of  MLMP's,  i.e.  the  number  of  minimal  paths  where 

A       A  A 

h(a)  =  h(a-l)  =  • • •  =  h(a-r+l)  '  and  let  s  denote  the  multi- 
plicity of  MVMC's,  i.e.  the  number  of  minimal  cuts  where 

h(l)  -  h(2)  "  '••  =  hs  ' 
Proposition  2 

For  a  coherent  system  of  order  n  and  a  given  p, 
0<p^<l,  i  =  l,2,...,n  ,  the  best,  i.e.  minimum  error,  conser- 
vative (optimistic)  estimate  of  system  reliability  using  a 
single  minimal  path  (cut)  is  the  reliability  of  the  MLMP  (MVMC) 

Proof 

For  k  =  1,2,. ..,b  ,  Bk(x)>(J)(x)  .   Given  p,  E[j3k(X)-]> 

—  B  R  R 

E[<j>(X)],  or,  h,>h  .   By  definition,  h   =  min  h,  and,  there- 
in- c     k    k 

fore,  Error  =  | h,  -  h|  is  a  minimum  for  k  =  c.   The  proof  for 

the  MLMP  is  similar. 

From  the  foregoing,  it  can  be  seen  that  if  it  is  not  pos- 
sible to  identify  all  of  the  minimal  cuts  or  paths  of  a 
coherent  system,  the  best  optimistic  estimate  of  system  reli- 
ability using  a  single  minimal  cut  is  the  reliability  of  the 
least  reliable  identified  minimal  cut  and  the  best  conservative 
estimate  of  system  reliability  using  a  single  minimal  path  is 
the  reliability  of  the  most  reliable  identified  minimal  path. 

If  it  is  possible  to  identify  all  of  the  minimal  paths  and 
minimal  cuts,  if  r>l  and/or  s>l,  and  if  0<p.<l,  i  =  l,2,...,n  , 
Proposition  1  then  guarantees  that  an  approximation  which  uses 
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all  of  the  MLMP's  or  MVMC ' s  is  a  better  approximation  than  one 
which  uses  only  a  single  MLMP  or  MVMC.   If  the  above  conditions 
are  satisfied,  the  conservative  estimate  can  be  extended  to 

(VI-9)  hr   =   E[cf>P(X)  |p] 

where  P  =  {A.  |h^  =  h^}  and  <})P(x)  is  defined  by  (VI-3)  and  the 
optimistic  estimate  can  be  extended  to 

(VI-10)  hS   =   E[cf>C(X)  |p] 

where  C  =   (\  lh^  =  h^  and  4>C(x)  is  defined  by  (VI-4). 

If  the  MLMP  and  the  MVMC  can  be  identified  for  a  given  sys- 
tem and  given  component  reliabilities,  a  change  in  any  of  the 
component  reliabilities  may  result  in  another  minimal  path 

(cut)  being  designated  as  the  MLMP  (MVMC) .   If  p.  =  p, 

i  =  l,2,...,n  ,  the  MLMP  (MVMC)  will  be  the  same  minimal  path 

(cut)  for  any  0<p<l.   In  fact,  for  the  case  of  identical  com- 
ponent reliabilities,  the  MLMP  (MVMC)  is  that  minimal  path  (cut) 
with  a  minimum  number  of  components.   In  other  words,  the  MLMP 
is  the  length,  I,    of  the  system  and  the  MVMC  is  the  width,  w, 
of  the  system. 

Example  2:   Communications  System,  Continued 

Recall  that  the  minimal  paths  for  the  modified  system  were 
A1  =    {1,6}  ,  A2  =  {2,7}  ,  A3  =  {1,3,5}  ,  A4  =  {2,4,8}  and  the 
minimal  cuts  were  B   =  {1,2}  r  B   =  {1,4,7}  ,  B3  =  {1,7,8}  , 
B4  =  {2,3,6}  ,  B5  =  {2,5,6}  ,  B6  =  {3,4,6,7}  ,  By  =  {3,6,7,8}  , 
B8  =  {4,5,6,7}  ,  B9  =  {5,6,7,8}  .   If  p.  =  p,  i  =  1,2,. . . ,n  , 
the  MVMC  is  B   and  the  reliability  function  of  the  MVMC  is 
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h^(p)  =  1  -  (1  -  p)2.   The  MLMP  is  A±   or  A2  and  the  reli- 

A        2 
ability  function  of  the  MLMP  is  h  (p)  =  p  .   Since  the  multi- 
plicity of  MLMP * s  is  r  =  2,  a  better  conservative  approximation 

r  2  2 

to  system  reliability  would  be  h  (p)  =  1  -  (1  -  p  )   (note  that 

paths  A,  and  A~  are  mutually  exclusive  which  may  not  always 
be  true) .   The  MVMC,  MLMP,  and  MLMP  multiplicity  approxima- 
tions to  the  actual  communications  system  reliability  are 
shown  in  Figure  5.   For  p>0.90,  h   is  accurate  to  within  0.00  4 
and  h   is  accurate  to  within  0.025. 

An  appreciation  of  the  accuracy  of  the  approximations  out- 
lined above  for  systems  with  highly  reliable  components  can  be 
gained  by  analyzing  the  form  of  the  true  reliability  function 
and  the  approximating  functions  in  the  region  of  highly  reli- 
able components.   By  letting  p.  =  p,  i  =  l,2,...,n  and  using 
the  results  of  Moore  and  Shannon  (1956),  Esary  and  Proschan 
(1962)  have  shown  that 

-5—  h(p)  I   ,   =  Number  of  cuts  of  size  1  in  the  system, 

and  that 

-^  h(p)  I   Q   =   Number  of  paths  of  size  1  in  the  system. 

For  a  system  with  no  paths  or  cuts  of  size  1,  the  reliability 
function  of  the  system  resembles  an  S  and  is  said  to  be  S- 
shaped. 

The  MLMP  approximation  to  a  system  with  no  cuts  of  size  1 

is  hA(p)  =  pl   where  I    is  the  length  of  the  system  structure. 

Now, 

A  A 

£>0 


lh>>U  = 
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and  the  MLMP  approximation  cannot  be  considered  a  good  approxi- 
mation in  the  region  of  highly  reliable  components.   However, 

if  r>l,  or  if  the  second  MLMP  (A  .  where  hA+  =  hA   , % )  is 

P*        P*     (a-1) 

included  in  the  approximation,  the  condition  that  the  system 

has  no  cuts  of  size  1  is  sufficient  to  insure  that 


hr(p)|p=1  =  0   and   g§  h*(p)|p=. 


where  h  (p)  is  the  MLMP  multiplicity  approximation  and  h*(p) 

is  an  approximation  developed  from  the  MLMP  and  the  second  MLMP. 

The  MVMC  approximation  to  the  same  system  is  h  (p)  = 

1  -  (1  -  p)   where  w  is  the  width  of  the  system  structure. 

-^  hB(p)|   .  =  0 
dp   c  ^  |p=l 

and  the  MVMC  approximation  is  considered  to  be  an  accurate  ap- 
proximation to  system  reliability  for  a  system  composed  of 
highly  reliable  components. 

The  MLMP  approximation  to  the  reliability  of  a  system  with 

A        £ 
q  cuts  of  size  1  is  h  (p)  =  p   and 

-^  hA(p) I   ,  =  Z>a    . 
dp   p    I p=l     - 

Although  the  MLMP  approximation  is  more  accurate  for  a  system 
with  q  cuts  of  size  1  than  for  a  system  with  no  cuts  of  size 
1,  the  accuracy  of  the  approximation  is  clearly  dependent  on 
the  magnitudes  of  q  and  I.  Including  multiplicity  of  MLMP ' s 
or  a  second  minimal  path  in  the  approximation  would,  in  this 
case,  decrease  the  accuracy  of  the  approximation.  Consideration 
micfht  be  given  to  the  possible  use  of  a  linear  function  (such 
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as  h*(p)  =  q(p  -  1)  +1)  to  approximate  the  reliability  of 
a  system  composed  of  highly  reliable  components  and  having 
q  cuts  of  size  1.   The  MVMC  approximation  to  a  system  with  q 

cuts  of  size  1  is  h  (p)  =  p  and 

c 

^-   hB(p)|   .  =  0  . 
dp   c  r  |P=1 

Note,  however,  that  the  multiplicity  of  MVMC ' s  is  s  =  q.   If 
no  two  of  the  q  components  are  identical,  the  system  reli- 

S  CT 

ability  function  can  be  approximated  with  h  (p)  =  p^-  and 


af  hs(P)|p=1  =  q  . 
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